General

  • Target
    https://cdn.discordapp.com/attachments/1480644967897497650/1493953012115443782/app.exe?ex=69e0d7aa&is=69df862a&hm=9f92d71bc5c011d0ccc9fd4097af376457c282a044487968b231b4718a7b6f40&
  • Sample260415-pswcsset4p

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/1480644967897497650/1493953012115443782/app.exe?ex=69e0d7aa&is=69df862a&hm=9f92d71bc5c011d0ccc9fd4097af376457c282a044487968b231b4718a7b6f40&
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks